4614 matches found
11 Websites hacked by team Jmc H4x0rs !
11 Websites hacked by team Jmc H4x0rs ! Hacked Sites : https://tronix.se/oscommerce2st/catalog/images/jmcc.html https://www.colecionismo.com.br/loja/images/jmcc.html https://danawa.jp/images/jmcc.html https://www.solarinformatica.com.ar/catalog/images/jmcc.html...
Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection
source: https://www.securityfocus.com/bid/45827/info Advanced Webhost Billing System AWBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or...
CMS Tovar - tovar.php SQL Injection
CMS Tovar - tovar.php SQL Injection source: https://www.securityfocus.com/bid/45772/info CMS Tovar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
WikLink 0.1.3 - Multiple SQL Injections
WikLink 0.1.3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/45731/info WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
WikLink 0.1.3 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/45731/info WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...
DeKalb website hacked !
It appeared briefly this week that all DeKalb County's properties were owned by a hacker. The county's property appraisal website was hacked and listed every property owner as "Hacked by Red xD," CEO's spokesman Burke Brennan confirmed for The Atlanta Journal-Constitution. Brennan insisted none o...
OpenEMR <= 3.2.0 Multiple Input Validation Vulnerabilities
OpenEMR is prone to SQL injection SQLi, HTML injection, and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
KLINK - SQL Injection
KLINK - SQL Injection Andr�s G�mez Exploit Title : KLINK Sql Injection Vulnerability Date : 2010-12-31 Author : Andr�s G�mez Software Developed by : http://www.contacto.com Contact : [email protected] Dork : "allinurl:.php?txtCodiInfo=" An attacker may execute arbitrary SQL statements on...
MyBB 1.6 - search.php?keywords SQL Injection
MyBB 1.6 - search.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...
MyBB 1.6 - private.php?keywords SQL Injection
MyBB 1.6 - private.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker ...
Social Share - Username SQL Injection
Social Share - Username SQL Injection source: https://www.securityfocus.com/bid/45536/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker t...
Social Share - postid SQL Injection
Social Share - postid SQL Injection source: https://www.securityfocus.com/bid/45497/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Mafya Oyun Scrpti - 'profil.php' SQL Injection
source: https://www.securityfocus.com/bid/45501/info Mafya Oyun Scrpti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...
Cross Site Scripting vulnerability in Diferior
Vulnerability ID: HTB22722 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability Type:...
Aigaion 1.3.4 - 'ID' SQL Injection
source: https://www.securityfocus.com/bid/45232/info Aigaion is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...
T-Dreams Job Seekers Package SQL Injection Vulnerability
Exploit for asp platform in category web applications ======================================================== T-Dreams Job Seekers Package SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...
Techno Dreams FAQ Manager Package 1.0 - faqlist.asp SQL Injection
Techno Dreams FAQ Manager Package 1.0 - faqlist.asp SQL Injection source: https://www.securityfocus.com/bid/45202/info Techno Dreams FAQ Manager Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Etomite 1.1 SQL,XSS,and file include vulnerabilities and fixes-vulnerability warning-the black bar safety net
Due to thevulnerabilityexists in“/index.php”the script has not been filtered will provide a search variable input. The attacker can modify the application the SQL query to the database, execute arbitrary queries of the database, compromise the application, access or modify sensitive data, or use ...
Etomite 1.1 Cross Site Scripting / Path Disclosure / SQL Injection
Vulnerability ID: HTB22710 Reference: http://www.htbridge.ch/advisory/sqlinjectioninetomite.html Product: Etomite Vendor: http://www.etomite.org/ http://www.etomite.org/ Vulnerable Version: 1.1 Vendor Notification: 18 November 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...
RSForm! Component for Joomla! 'lang' Parameter SQL Injection and Local File Include Vulnerabilities
The RSForm! Component for Joomla! is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent...